{"id":1551,"date":"2026-09-11T11:31:30","date_gmt":"2026-09-11T06:01:30","guid":{"rendered":"https:\/\/www.hexnode.com\/threat-watch\/?p=1551"},"modified":"2026-09-14T15:18:14","modified_gmt":"2026-09-14T09:48:14","slug":"litellm-exposed-admin-key-what-wiz-research-found","status":"publish","type":"post","link":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/","title":{"rendered":"LiteLLM Exposed Admin Key: What Wiz Research Found"},"content":{"rendered":"<p>A single default value, sk-1234, opened cloud access on hundreds of exposed AI gateways. This LiteLLM exposed admin key let Wiz Research walk into cloud credentials during a routine scan. Wiz Research scanned <a href=\"https:\/\/thehackernews.com\/2026\/09\/nearly-1-in-10-exposed-litellm-gateways.html?utm_source=hexnode_blog&amp;utm_medium=referral&amp;utm_campaign=litellm_exposed_admin_key\" target=\"_blank\" rel=\"nofollow noopener\">3,074<\/a> internet-facing LiteLLM gateways in February. It found 294, nearly one in ten, either accepted the example key or lacked authentication entirely.<\/p>\n<p>The LiteLLM master key does two jobs. It switches on authentication and also functions as the administrator credential. Leaving it unset could grant admin access, while sk-1234 exposed access to anyone who knew it. Wiz Research showed this access reaches beyond the gateway itself. Through pass-through routing, an admin can route to any URL, including a cloud metadata service. Wiz used this to retrieve live <a href=\"https:\/\/www.hexnode.com\/mobile-device-management\/identity-and-access-management\/\">IAM<\/a> credentials from the gateway&#8217;s host machine.<\/p>\n<p>LiteLLM treats this path as intended, not a vulnerability, and has issued no <a href=\"https:\/\/www.hexnode.com\/blogs\/explained\/what-is-common-vulnerabilities-and-exposures-cve-in-cybersecurity\/\">CVE<\/a> or fix. Its security policy separately lists setup mistakes, like an unset master key, as out of scope. Other LiteLLM CVEs exist independently of this issue, covered below.<\/p>\n<p><center>    \t\t<!-- button style scb20be917a3efc78059cf9961ee4e54284 -->\r\n    \t\t<style>\r\n    \t\t\t.scb20be917a3efc78059cf9961ee4e54284, a.scb20be917a3efc78059cf9961ee4e54284{\r\n    \t\t\t\tcolor: #fff;\r\n    \t\t\t\tbackground-color: #00868B;\r\n    \t\t\t}\r\n    \t\t\t.scb20be917a3efc78059cf9961ee4e54284:hover, a.scb20be917a3efc78059cf9961ee4e54284:hover{\r\n    \t\t\t\t    \t\t\t\tbackground-color: #32b8bd;\r\n    \t\t\t}\r\n    \t\t<\/style>\r\n    \t\t<a href=\"https:\/\/www.hexnode.com\/\" class=\"ht-shortcodes-button scb20be917a3efc78059cf9961ee4e54284  hn-cta__blogs--inline-button \" id=\"\" style=\"\" >\r\n    \t\tBook a free demo and explore Hexnode today!<\/a>\r\n    \t\t<\/center><\/p>\n<h2>How Wiz Research found the LiteLLM exposed admin key<\/h2>\n<p>Of the 3,074 LiteLLM gateways Wiz Research scanned in February 2026, 191 had no master key set at all, meaning they would accept any credential offered. The remaining 103 of the 294 exposed gateways still carried the example sk-1234 key straight from LiteLLM&#8217;s setup guide.<\/p>\n<p>Wiz Research ran a second scan in August 2026 and found more than 85,000 LiteLLM instances, but most appeared to be honeypots or test systems. Wiz Research states the two scans do not allow a direct comparison, so there is no current figure for how many exposed gateways remain today. As of September 9, 2026, LiteLLM&#8217;s setup guide still lists sk-1234 as the example value, with a comment instructing operators to replace it with a long random value before real use.<\/p>\n<h2>One key, two jobs: Why the master key matters<\/h2>\n<p>The LiteLLM master key does two jobs at once. It switches on authentication, and it also works as the administrator credential itself. Before version 1.82.0-stable, a gateway that started without a configured master key granted full admin rights to every request it received.<\/p>\n<h3>An administrator&#8217;s access reaches far inside the gateway:<\/h3>\n<ul>\n<li>It can read every provider&#8217;s API key stored on the server.<\/li>\n<li>It can see every prompt and response passing through.<\/li>\n<li>It can reach internal tools connected through the <a href=\"https:\/\/www.hexnode.com\/blogs\/explained\/what-is-model-context-protocol-mcp\/\">Model Context Protocol<\/a>, or MCP.<\/li>\n<\/ul>\n<p>The gateway typically runs with the cloud permissions of the workload hosting it. A stolen provider key alone lets an attacker run model workloads on the victim&#8217;s cloud bill, an abuse known as LLMjacking.<\/p>\n<div class=\"next_blog\"><div class=\"post-next\"><div class=\"hex_blog_box_parent\"><div class=\"blog_warp_next\"><div class=\"next_blog_thumb\" style=\"background-image:url(https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/08\/threat-analysis-.jpeg?format=webp)\"><\/div><div class=\"next_post_content\"><div class=\"center_box\"><h4>What is Threat Analysis?<\/h4><p>Threat analysis explained: detection, correlation, tools, and Hexnode XDR's role.<\/p><\/div><\/div><\/div><a class=\"hex_blog_box_link hn-cta__blogs--blog-box\" href=\"https:\/\/www.hexnode.com\/blogs\/what-is-threat-analysis\/\" aria-label=\"What is Threat Analysis?\"><\/a><\/div><\/div><\/div>\n<h2>From admin access to cloud IAM credentials<\/h2>\n<p>LiteLLM lets an administrator create a pass-through endpoint, a route that forwards requests to any URL the admin chooses. Wiz Research showed how this feature reaches beyond the gateway itself:<\/p>\n<ul>\n<li>LiteLLM does not check the target URL against private address ranges, localhost, or cloud metadata addresses.<\/li>\n<li>An admin can point a pass-through route at the instance metadata service and read back live IAM credentials.<\/li>\n<li>Switching to IMDSv2 doesn&#8217;t block this path. IMDSv2 needs a session token via the X-aws-ec2-metadata-token header, but LiteLLM strips the x-pass- prefix from forwarded headers, so an admin sending x-pass-X-aws-ec2-metadata-token gets LiteLLM to deliver a valid token request on their behalf.<\/li>\n<\/ul>\n<p>No public reporting confirms that anyone has used this path against a real deployment. Wiz Research demonstrated it as a proof of concept, and it requires admin access first. Wiz Research stated the feature is arguably working as intended, since LiteLLM&#8217;s threat model treats administrators as trusted. LiteLLM has issued no CVE and no fix for this path.<\/p>\n<h2>A disputed severity: The guardrail code execution flaws<\/h2>\n<p>Wiz Research and LiteLLM&#8217;s advisory describe one flaw very differently.<\/p>\n<h3>CVE-2026-59821 \u2014 endpoint check bypass:<\/h3>\n<ul>\n<li>Involves the endpoints that create and update custom code guardrails.<\/li>\n<li>Before version 1.82.0-stable, these endpoints skipped the sandbox and pattern checks a separate test endpoint applied.<\/li>\n<li>Callers with a valid API key could submit Python code that ran inside the container.<\/li>\n<li>Wiz Research called it post-authentication root-level code execution, with testing that returned root access.<\/li>\n<li>LiteLLM&#8217;s advisory rates it Low, with a CVSS v4 score of 2.1.<\/li>\n<\/ul>\n<h3>CVE-2026-40217 \u2014 sandbox escape:<\/h3>\n<ul>\n<li>A separate flaw that hits the sandbox itself, not the endpoints bypassing it.<\/li>\n<li>Published in May 2026, it describes a bytecode technique that escapes the guardrail sandbox.<\/li>\n<li>The escape runs code in the main proxy process, which runs as root in LiteLLM&#8217;s default Docker image.<\/li>\n<li>Covers versions 1.81.8 up to, but not including, 1.83.10.<\/li>\n<li>Exploiting it requires the master key.<\/li>\n<\/ul>\n<p>LiteLLM fixed the flaws in February and April 2026; their CVEs were published separately.<\/p>\n<h2>A separate, actively exploited track<\/h2>\n<p>These issues are unrelated to the default-key and pass-through problems above, but they affect the same product.<\/p>\n<h3>CVE-2026-59822 (MCP bypass, CVSS 8.8):<\/h3>\n<p>CISA added it to the KEV catalog on September 2, 2026, with a September 16 deadline. It lets an unauthenticated attacker open an MCP session using any Bearer token, even one character long. Wiz Research saw it probe honeypots starting July 7, 2026; impact depends on connected tool servers.<\/p>\n<h3>CVE-2026-42271 (host command execution, CVSS 8.7):<\/h3>\n<p>Allows authenticated users to run host commands through two MCP test endpoints. Horizon3.ai reported in June 2026 that chaining it with the Starlette flaw CVE-2026-48710 enabled execution with no credentials.<\/p>\n<h3>Real-world impact:<\/h3>\n<p>Wiz Research saw <a href=\"https:\/\/www.tenable.com\/cve\/CVE-2026-42271?utm_source=hexnode_blog&amp;utm_medium=referral&amp;utm_campaign=litellm_exposed_admin_key\" target=\"_blank\" rel=\"nofollow noopener\">CVE-2026-42271<\/a> used to install cryptocurrency miners on its honeypots. Microsoft documented an intrusion where attackers obtained the master key, provider keys, and database credentials from a gateway container. Microsoft assessed with high confidence that the entry point matched this chain, urging organizations to treat AI gateways as Tier-0 secret stores.<\/p>\n<h2>What&#8217;s Affected and What&#8217;s Fixed<\/h2>\n<table style=\"width: 100%;\">\n<thead>\n<tr>\n<th style=\"width: 26.0042%; text-align: left;\"><strong>Flaw<\/strong><\/th>\n<th style=\"width: 26.7442%; text-align: left;\"><strong>What It Allows<\/strong><\/th>\n<th style=\"width: 24.4186%; text-align: left;\"><strong>Affected Versions<\/strong><\/th>\n<th style=\"width: 21.4588%; text-align: left;\"><strong>Fixed In<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"width: 26.0042%;\">CVE-2026-59822 (MCP authentication bypass)<\/td>\n<td style=\"width: 26.7442%;\">Unauthenticated MCP session access using any Bearer token<\/td>\n<td style=\"width: 24.4186%;\">Before 1.84.0<\/td>\n<td style=\"width: 21.4588%;\">1.84.0+<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 26.0042%;\">CVE-2026-42271 (MCP test endpoint command execution)<\/td>\n<td style=\"width: 26.7442%;\">Authenticated users can run commands on the host<\/td>\n<td style=\"width: 24.4186%;\">1.74.2 up to, but not including, 1.83.7<\/td>\n<td style=\"width: 21.4588%;\">1.84.0+<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 26.0042%;\">CVE-2026-59821 (Guardrail check bypass)<\/td>\n<td style=\"width: 26.7442%;\">Code execution inside the gateway container<\/td>\n<td style=\"width: 24.4186%;\">Before 1.82.0-stable<\/td>\n<td style=\"width: 21.4588%;\">1.84.0+<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 26.0042%;\">CVE-2026-40217 (Guardrail sandbox escape)<\/td>\n<td style=\"width: 26.7442%;\">Code execution as root in the default container image<\/td>\n<td style=\"width: 24.4186%;\">1.81.8 up to, but not including, 1.83.10<\/td>\n<td style=\"width: 21.4588%;\">1.84.0+<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Remediation checklist<\/h2>\n<ul>\n<li>Rotate the master key from sk-1234 to a long, random value. This needs no upgrade, but check first whether a separate salt key exists, since rotation steps differ.<\/li>\n<li>Upgrade to LiteLLM 1.84.0 or later, which sits above the fixed version for every flaw in the table above.<\/li>\n<li>If an immediate upgrade is not possible, block the \/mcp\/ path and the two MCP test endpoints at your reverse proxy or API gateway.<\/li>\n<li>Block the custom-code guardrail test endpoint, and restrict guardrail creation and update endpoints to administrators only.<\/li>\n<li>Review every pass-through endpoint on the gateway, restrict its outbound network access, and assign the narrowest cloud IAM role the workload needs.<\/li>\n<li>If you suspect prior access, review the guardrails list for entries you did not create, restart the process to clear any code it holds in memory, and rotate the master key, provider keys, and database credentials.<\/li>\n<\/ul>\n<section id='resource-single'>\n                    <div class='resource-box'>\n                        <div class='resource-box__image-section'>\n                            <div class='resource-box__image-wrap'>\n                                <img decoding=\"async\" src=\"https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/08\/The-cybersecurity-blueprint.png?format=webp\" class=\"resource-box__image\" alt=\"the cybersecurity blueprint\" loading=\"lazy\" srcset=\"https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/08\/The-cybersecurity-blueprint.png?format=webp 960w, https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/08\/The-cybersecurity-blueprint-300x225.png?format=webp 300w, https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/08\/The-cybersecurity-blueprint-768x576.png?format=webp 768w, https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/08\/The-cybersecurity-blueprint-133x100.png?format=webp 133w\" sizes=\"auto, (max-width: 960px) 100vw, 960px\" title=\"the cybersecurity blueprint\" \/>\n                            <\/div>\n                        <\/div>\n                        <div class='resource-box__content-section'>\n                            <h5 class='resource-box__content-subheading'>\n                            Featured resource\n                            <\/h5>\n                            <h4 class='resource-box__content-heading'>\n                            The Cybersecurity Blueprint\n                            <\/h4>\n                            <p class='resource-box__contents'>\n                            Adopt the right cybersecurity strategy: key statistics, attack patterns, and step-by-step implementation guidance for your organization.\n                            <\/p>\n                            <a class='resource-box__content-link hn-cta__blogs--resource-box' href='https:\/\/www.hexnode.com\/resources\/white-papers\/the-cybersecurity-blueprint-how-to-adopt-the-right-cybersecurity-strategy-for-your-business\/'>\n                            DOWNLOAD\n                            <svg xmlns='http:\/\/www.w3.org\/2000\/svg' width='20' height='20' viewBox='0 0 20 20'>\n                            <g id='arrow' transform='translate(-309 -191)' opacity='0'>\n                                <rect id='base' width='20' height='20' transform='translate(309 191)' fill='none'\/>\n                                <path id='arrow-2' data-name='arrow' d='M13.093.5,6.8,6.8.5.5' transform='translate(315 207.594) rotate(-90)' fill='none' stroke='#0549d1' stroke-linecap='round' stroke-linejoin='round' stroke-width='1.2'\/>\n                            <\/g>\n                            <\/svg>\n\n                            <\/a>\n                        <\/div>\n                    <\/div>\n                <\/section>\n<h2>Where Hexnode fits in this picture<\/h2>\n<p>This incident centers on a Linux-hosted gateway, and Microsoft&#8217;s documented intrusion took place inside a Linux Docker container. That puts it outside Hexnode&#8217;s current platform capabilities.<\/p>\n<ul>\n<li><a href=\"https:\/\/www.hexnode.com\/uem\/\">Hexnode UEM<\/a> manages device configuration, patch deployment, and compliance enforcement across endpoints. It does not manage application-level secrets or admin-panel settings on a server process like a LiteLLM gateway.<\/li>\n<li>Conditional Access via Microsoft Entra ID extends to Android, iOS, and macOS devices, gating resource access based on device compliance status. It does not extend to Linux server infrastructure.<\/li>\n<li><a href=\"https:\/\/www.hexnode.com\/idp\/\">Hexnode IdP<\/a> provides identity-based access control, RBAC, and MFA for approved apps. It doesn&#8217;t rotate an application&#8217;s own credentials or fix flaws like a default admin key on a self-hosted gateway.<\/li>\n<li><a href=\"https:\/\/www.hexnode.com\/xdr\/\">Hexnode XDR<\/a> focuses on endpoint threat detection and response on Windows and macOS. It has no visibility into activity occurring inside a Linux-based gateway container.<\/li>\n<\/ul>\n<p>None of these capabilities reach the actual failure point in this incident: a leaked application credential inside a Linux server process.<\/p>\n<div class=\"faq-section-wrapper\" itemscope itemtype=\"https:\/\/schema.org\/FAQPage\"><h2 class=\"faq-main-title\">FAQs<\/h2><div class=\"faq-items\"><div class=\"faq-item\" itemprop=\"mainEntity\" itemscope itemtype=\"https:\/\/schema.org\/Question\"><div class=\"faq-item__question\" role=\"button\" tabindex=\"0\" aria-expanded=\"false\"><span itemprop=\"name\">Does upgrading LiteLLM fix the sk-1234 default key problem?<\/span>\n            <div class=\"toggle\" aria-hidden=\"true\"><span><\/span><span><\/span><\/div>\n        <\/div> <div class=\"faq-item__content\" itemprop=\"acceptedAnswer\" itemscope itemtype=\"https:\/\/schema.org\/Answer\"><div class=\"faq-item__body\" itemprop=\"text\"><p>No. Rotating the master key is a separate, manual step. Upgrading closes the CVEs in the table, but an operator must still replace the default or missing key.<\/p>\n<\/div><\/div><\/div>\n<div class=\"faq-item\" itemprop=\"mainEntity\" itemscope itemtype=\"https:\/\/schema.org\/Question\"><div class=\"faq-item__question\" role=\"button\" tabindex=\"0\" aria-expanded=\"false\"><span itemprop=\"name\">Has the pass-through-to-cloud-metadata path been used in a real attack<\/span>\n            <div class=\"toggle\" aria-hidden=\"true\"><span><\/span><span><\/span><\/div>\n        <\/div> <div class=\"faq-item__content\" itemprop=\"acceptedAnswer\" itemscope itemtype=\"https:\/\/schema.org\/Answer\"><div class=\"faq-item__body\" itemprop=\"text\"><p>Public reporting does not confirm this. Wiz Research demonstrated it as a proof of concept that requires admin access first, and no source describes anyone using it against a live deployment.<\/p>\n<\/div><\/div><\/div>\n<div class=\"faq-item\" itemprop=\"mainEntity\" itemscope itemtype=\"https:\/\/schema.org\/Question\"><div class=\"faq-item__question\" role=\"button\" tabindex=\"0\" aria-expanded=\"false\"><span itemprop=\"name\">How is the actively exploited MCP flaw different from the default-key issue?<\/span>\n            <div class=\"toggle\" aria-hidden=\"true\"><span><\/span><span><\/span><\/div>\n        <\/div> <div class=\"faq-item__content\" itemprop=\"acceptedAnswer\" itemscope itemtype=\"https:\/\/schema.org\/Answer\"><div class=\"faq-item__body\" itemprop=\"text\"><p>CVE-2026-59822 lets an attacker open an MCP session with any Bearer token, without needing the master key at all. The default-key problem requires holding or guessing the admin credential itself.<\/p>\n<\/div><\/div><\/div><\/div><\/div>\n<h3>Conclusion<\/h3>\n<p>The LiteLLM exposed admin key shows how one overlooked setting turns an AI gateway into a path toward cloud credentials, provider API keys, and connected data. Treating that gateway as privileged identity infrastructure, not just another service, changes how you configure and monitor it.<\/p>\n<p>Replacing default secrets, narrowing IAM roles and outbound access, and upgrading to a version resolving the known CVEs all reduce this exposure. None of these steps guarantee an attacker hasn&#8217;t already accessed a gateway exposed since February, so internet-facing LiteLLM operators should treat credential rotation and log review as immediate priorities.<\/p>\n<div class=\"signup_box\"><div class=\"signup_wrap_img\"><div class=\"signup-bg\" style=\"background-image:url(https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/08\/Hexnode-MDM-free-trial.jpg?format=webp)\"><\/div><\/div><div class=\"signup_wrap\"><h5>Stay ahead of AI infrastructure threats. <\/h5><p>Get weekly threat intelligence and remediation guidance in your inbox. <\/p><a href=\"https:\/\/www.hexnode.com\/xdr\/signup\/\" class=\"hn-cta__blogs--signup-stripe\" target=\"_blank\"> SIGN UP NOW<\/a><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>A single default value, sk-1234, opened cloud access on hundreds of exposed AI gateways. This&#8230;<\/p>\n","protected":false},"author":5,"featured_media":1597,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[13,19],"class_list":["post-1551","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-identity-abuse","category-cloud-and-saas","product_category-identity-provider","tab_group-vulnerabilities"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>LiteLLM Exposed Admin Key: What Wiz Research Found<\/title>\n<meta name=\"description\" content=\"Wiz Research found the LiteLLM exposed admin key on 294 of 3,074 internet-facing gateways, risking provider and cloud credentials.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LiteLLM Exposed Admin Key: What Wiz Research Found\" \/>\n<meta property=\"og:description\" content=\"Wiz Research found the LiteLLM exposed admin key on 294 of 3,074 internet-facing gateways, risking provider and cloud credentials.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/\" \/>\n<meta property=\"og:site_name\" content=\"Hexnode Threat Watch\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Hexnode\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-11T06:01:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-14T09:48:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/litellm-exposed-admin-key.jpeg?format=webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1340\" \/>\n\t<meta property=\"og:image:height\" content=\"700\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sophia Hart\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@thehexnode\" \/>\n<meta name=\"twitter:site\" content=\"@thehexnode\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sophia Hart\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/\"},\"author\":{\"name\":\"Sophia Hart\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#\\\/schema\\\/person\\\/7303d7e90665b5fbccde155fa1c11430\"},\"headline\":\"LiteLLM Exposed Admin Key: What Wiz Research Found\",\"datePublished\":\"2026-09-11T06:01:30+00:00\",\"dateModified\":\"2026-09-14T09:48:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/\"},\"wordCount\":1629,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cdn.hexnode.com\\\/threat-watch\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/litellm-exposed-admin-key.jpeg?format=webp\",\"articleSection\":[\"Identity Abuse\",\"Cloud and SaaS\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/\",\"url\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/\",\"name\":\"LiteLLM Exposed Admin Key: What Wiz Research Found\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cdn.hexnode.com\\\/threat-watch\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/litellm-exposed-admin-key.jpeg?format=webp\",\"datePublished\":\"2026-09-11T06:01:30+00:00\",\"dateModified\":\"2026-09-14T09:48:14+00:00\",\"description\":\"Wiz Research found the LiteLLM exposed admin key on 294 of 3,074 internet-facing gateways, risking provider and cloud credentials.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/#primaryimage\",\"url\":\"https:\\\/\\\/cdn.hexnode.com\\\/threat-watch\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/litellm-exposed-admin-key.jpeg?format=webp\",\"contentUrl\":\"https:\\\/\\\/cdn.hexnode.com\\\/threat-watch\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/litellm-exposed-admin-key.jpeg?format=webp\",\"width\":1340,\"height\":700,\"caption\":\"litellm exposed admin key\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/litellm-exposed-admin-key-what-wiz-research-found\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"LiteLLM Exposed Admin Key: What Wiz Research Found\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#website\",\"url\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/\",\"name\":\"Hexnode Threat Watch\",\"description\":\"Latest cyber threats, smarter enterprise response.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#organization\"},\"alternateName\":\"Threat Watch\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#organization\",\"name\":\"Hexnode\",\"url\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/hexnode-2.png?format=webp\",\"contentUrl\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/hexnode-2.png?format=webp\",\"width\":100,\"height\":100,\"caption\":\"Hexnode\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/Hexnode\\\/\",\"https:\\\/\\\/x.com\\\/thehexnode\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/hexnode\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/#\\\/schema\\\/person\\\/7303d7e90665b5fbccde155fa1c11430\",\"name\":\"Sophia Hart\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9f2fcf8cf2a94925b3769939d19f157c643407bd45ff69fd553f22903b961f3a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9f2fcf8cf2a94925b3769939d19f157c643407bd45ff69fd553f22903b961f3a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9f2fcf8cf2a94925b3769939d19f157c643407bd45ff69fd553f22903b961f3a?s=96&d=mm&r=g\",\"caption\":\"Sophia Hart\"},\"description\":\"A storyteller for practical people. Breaks down complicated topics into steps, trade-offs, and clear next actions\u2014without the buzzword fog. Known to replace fluff with facts, sharpen the message, and keep things readable\u2014politely.\",\"url\":\"https:\\\/\\\/www.hexnode.com\\\/threat-watch\\\/author\\\/sophia-hart\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LiteLLM Exposed Admin Key: What Wiz Research Found","description":"Wiz Research found the LiteLLM exposed admin key on 294 of 3,074 internet-facing gateways, risking provider and cloud credentials.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/","og_locale":"en_US","og_type":"article","og_title":"LiteLLM Exposed Admin Key: What Wiz Research Found","og_description":"Wiz Research found the LiteLLM exposed admin key on 294 of 3,074 internet-facing gateways, risking provider and cloud credentials.","og_url":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/","og_site_name":"Hexnode Threat Watch","article_publisher":"https:\/\/www.facebook.com\/Hexnode\/","article_published_time":"2026-09-11T06:01:30+00:00","article_modified_time":"2026-09-14T09:48:14+00:00","og_image":[{"width":1340,"height":700,"url":"https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/litellm-exposed-admin-key.jpeg?format=webp","type":"image\/jpeg"}],"author":"Sophia Hart","twitter_card":"summary_large_image","twitter_creator":"@thehexnode","twitter_site":"@thehexnode","twitter_misc":{"Written by":"Sophia Hart","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/#article","isPartOf":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/"},"author":{"name":"Sophia Hart","@id":"https:\/\/www.hexnode.com\/threat-watch\/#\/schema\/person\/7303d7e90665b5fbccde155fa1c11430"},"headline":"LiteLLM Exposed Admin Key: What Wiz Research Found","datePublished":"2026-09-11T06:01:30+00:00","dateModified":"2026-09-14T09:48:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/"},"wordCount":1629,"commentCount":0,"publisher":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/#organization"},"image":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/#primaryimage"},"thumbnailUrl":"https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/litellm-exposed-admin-key.jpeg?format=webp","articleSection":["Identity Abuse","Cloud and SaaS"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/","url":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/","name":"LiteLLM Exposed Admin Key: What Wiz Research Found","isPartOf":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/#primaryimage"},"image":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/#primaryimage"},"thumbnailUrl":"https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/litellm-exposed-admin-key.jpeg?format=webp","datePublished":"2026-09-11T06:01:30+00:00","dateModified":"2026-09-14T09:48:14+00:00","description":"Wiz Research found the LiteLLM exposed admin key on 294 of 3,074 internet-facing gateways, risking provider and cloud credentials.","breadcrumb":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/#primaryimage","url":"https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/litellm-exposed-admin-key.jpeg?format=webp","contentUrl":"https:\/\/cdn.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/09\/litellm-exposed-admin-key.jpeg?format=webp","width":1340,"height":700,"caption":"litellm exposed admin key"},{"@type":"BreadcrumbList","@id":"https:\/\/www.hexnode.com\/threat-watch\/litellm-exposed-admin-key-what-wiz-research-found\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.hexnode.com\/threat-watch\/"},{"@type":"ListItem","position":2,"name":"LiteLLM Exposed Admin Key: What Wiz Research Found"}]},{"@type":"WebSite","@id":"https:\/\/www.hexnode.com\/threat-watch\/#website","url":"https:\/\/www.hexnode.com\/threat-watch\/","name":"Hexnode Threat Watch","description":"Latest cyber threats, smarter enterprise response.","publisher":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/#organization"},"alternateName":"Threat Watch","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hexnode.com\/threat-watch\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.hexnode.com\/threat-watch\/#organization","name":"Hexnode","url":"https:\/\/www.hexnode.com\/threat-watch\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hexnode.com\/threat-watch\/#\/schema\/logo\/image\/","url":"https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/08\/hexnode-2.png?format=webp","contentUrl":"https:\/\/www.hexnode.com\/threat-watch\/wp-content\/uploads\/2026\/08\/hexnode-2.png?format=webp","width":100,"height":100,"caption":"Hexnode"},"image":{"@id":"https:\/\/www.hexnode.com\/threat-watch\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Hexnode\/","https:\/\/x.com\/thehexnode","https:\/\/www.linkedin.com\/company\/hexnode"]},{"@type":"Person","@id":"https:\/\/www.hexnode.com\/threat-watch\/#\/schema\/person\/7303d7e90665b5fbccde155fa1c11430","name":"Sophia Hart","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9f2fcf8cf2a94925b3769939d19f157c643407bd45ff69fd553f22903b961f3a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/9f2fcf8cf2a94925b3769939d19f157c643407bd45ff69fd553f22903b961f3a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9f2fcf8cf2a94925b3769939d19f157c643407bd45ff69fd553f22903b961f3a?s=96&d=mm&r=g","caption":"Sophia Hart"},"description":"A storyteller for practical people. Breaks down complicated topics into steps, trade-offs, and clear next actions\u2014without the buzzword fog. Known to replace fluff with facts, sharpen the message, and keep things readable\u2014politely.","url":"https:\/\/www.hexnode.com\/threat-watch\/author\/sophia-hart\/"}]}},"_links":{"self":[{"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/posts\/1551","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/comments?post=1551"}],"version-history":[{"count":6,"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/posts\/1551\/revisions"}],"predecessor-version":[{"id":1624,"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/posts\/1551\/revisions\/1624"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/media\/1597"}],"wp:attachment":[{"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/media?parent=1551"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexnode.com\/threat-watch\/wp-json\/wp\/v2\/categories?post=1551"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}